CVE

Id
48100  
CVE No.
CVE-2011-0188  
Status
Candidate  
Description
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue."  
Phase
Assigned (20101223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
522930 48100 CVE-2011-0188 CONFIRM:http://support.apple.com/kb/HT4581  View
522931 48100 CVE-2011-0188 CONFIRM:http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/bigdecimal/bigdecimal.c?r1=29364&r2=30993  View
522932 48100 CVE-2011-0188 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=682332  View
522933 48100 CVE-2011-0188 APPLE:APPLE-SA-2011-03-21-1  View
522934 48100 CVE-2011-0188 URL:http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html  View
522935 48100 CVE-2011-0188 MANDRIVA:MDVSA-2011:097  View
522936 48100 CVE-2011-0188 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:097  View
522937 48100 CVE-2011-0188 MANDRIVA:MDVSA-2011:098  View
522938 48100 CVE-2011-0188 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:098  View
522939 48100 CVE-2011-0188 REDHAT:RHSA-2011:0908  View
522940 48100 CVE-2011-0188 URL:http://www.redhat.com/support/errata/RHSA-2011-0908.html  View
522941 48100 CVE-2011-0188 REDHAT:RHSA-2011:0909  View
522942 48100 CVE-2011-0188 URL:http://www.redhat.com/support/errata/RHSA-2011-0909.html  View
522943 48100 CVE-2011-0188 REDHAT:RHSA-2011:0910  View
522944 48100 CVE-2011-0188 URL:http://www.redhat.com/support/errata/RHSA-2011-0910.html  View
522945 48100 CVE-2011-0188 SECTRACK:1025236  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31177 JVNDB-2011-001416 Apple Mac OS X の Image RAW におけるバッファオーバーフローの脆弱性 Apple Mac OS X の Image RAW には、バッファオーバーフローの脆弱性が存在します。 CVE-2011-0193 48100 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001416.html  View